Summary
Kevin Ryde discovered that File::Find::Rule incorrectly handled certain
file names. An attacker could possibly use this issue to execute arbitrary
code.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 22.04 LTS 22.04:LTS | libfile-find-rule-perl | 0.34-1ubuntu0.22.04.1 |
| Ubuntu · 24.04 LTS 24.04:LTS | libfile-find-rule-perl | 0.34-3ubuntu0.24.04.1 |
Vulnerabilities 1
-
High 8.8
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted file name
File::Find::Rule through 0.34 for Perl is vulnerable to Arbitrary Code Execution when `grep()` encounters a crafted filename. A file handle is opened with the 2 argument form of `open()` allowing an attacker controlled filename to provide the MODE parameter t…
References
-
report
https://ubuntu.com/security/CVE-2011-10007